Overview

overview

7

Static

static

3

d9a8e95732...18.exe

windows7-x64

7

d9a8e95732...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9a8e95732ab27cf45c542ee25078362_JaffaCakes118

  • Size

    865KB

  • Sample

    240911-fnk7latenl

  • MD5

    d9a8e95732ab27cf45c542ee25078362

  • SHA1

    daa3859744ad48e72b870342561a7f60a0b1faf6

  • SHA256

    8b019539889b3cbdb004b2992861e06ae27681cd9f5c6c1f3505192b682c3ed6

  • SHA512

    264a0fff419ab2f3c6ef19cc6a5781e33cb169ee9f0b6c422f14a321215b8c7d0543f99960f3884d7bed6119994b6cab7d695c6907a58dcc9e7dc7e6359bf2d6

  • SSDEEP

    24576:MIlXYgWOZ61cG5g0TjceqlGz3Yv6FEBuENO9/GX:MIlWOZ6+kJTAlS3Yv6FGNE/GX

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      d9a8e95732ab27cf45c542ee25078362_JaffaCakes118

    • Size

      865KB

    • MD5

      d9a8e95732ab27cf45c542ee25078362

    • SHA1

      daa3859744ad48e72b870342561a7f60a0b1faf6

    • SHA256

      8b019539889b3cbdb004b2992861e06ae27681cd9f5c6c1f3505192b682c3ed6

    • SHA512

      264a0fff419ab2f3c6ef19cc6a5781e33cb169ee9f0b6c422f14a321215b8c7d0543f99960f3884d7bed6119994b6cab7d695c6907a58dcc9e7dc7e6359bf2d6

    • SSDEEP

      24576:MIlXYgWOZ61cG5g0TjceqlGz3Yv6FEBuENO9/GX:MIlWOZ6+kJTAlS3Yv6FGNE/GX

    Score
    7/10
    bootkitdiscoverypersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks